[Cherry-Pick][CI] Restore self-hosted runners for GitHub workflows(#7906) (#7909)

Author: EmmonsCurse

.github/workflows/CheckPRTemplate.yml

@@ -10,7 +10,8 @@ jobs:
   check:
     name: Check PR Template
     if: ${{ github.repository_owner == 'PaddlePaddle' }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       PR_ID: ${{ github.event.pull_request.number }}
       BASE_BRANCH: ${{ github.event.pull_request.base.ref }}

.github/workflows/Codestyle-Check.yml

@@ -10,7 +10,8 @@ jobs:
   pre-commit:
     name: Pre Commit
     if: ${{ github.repository_owner == 'PaddlePaddle' }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       PR_ID: ${{ github.event.pull_request.number }}
       BRANCH: ${{ github.event.pull_request.base.ref }}

.github/workflows/_unit_test_coverage.yml

@@ -416,11 +416,15 @@ jobs:
   diff_coverage_report:
     needs: run_tests_with_coverage
     if: always()
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     timeout-minutes: 15
     env:
       all_cov_file_url: ${{ needs.run_tests_with_coverage.outputs.all_cov_file_url }}
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Clone FastDeploy
         uses: actions/checkout@v6
         with:

.github/workflows/approve.yml

@@ -13,11 +13,15 @@ jobs:
   Approval:
     name: Approval
     if: ${{ github.repository_owner == 'PaddlePaddle' }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       PR_ID: ${{ github.event.pull_request.number }}
       BRANCH: ${{ github.event.pull_request.base.ref }}
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Checkout base repo
         uses: actions/checkout@v6
         with:

.github/workflows/cancel_ci_iluvatar.yml

@@ -13,8 +13,12 @@ concurrency:
 jobs:
   cancel:
     name: Cancel ILUVATAR-CI for ${{ github.event.pull_request.number }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Cancel ILUVATAR-CI
         run: |
           exit 0

.github/workflows/cancel_ci_xpu.yml

@@ -13,8 +13,12 @@ concurrency:
 jobs:
   cancel:
     name: Cancel CI_XPU for ${{ github.event.pull_request.number }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Cancel CI_XPU
         run: |
           exit 0

.github/workflows/cancel_pr_build_and_test.yml

@@ -12,8 +12,12 @@ concurrency:
 jobs:
   cancel:
     name: Cancel PR Build and Test for ${{ github.event.pull_request.number }}
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Cancel PR Build and Test
         run: |
           exit 0

.github/workflows/ce_job.yml

@@ -14,7 +14,8 @@ concurrency:
 
 jobs:
   ce_job_pre_check:
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       COMPILE_BRANCH: ${{ vars.COMPILE_BRANCH }}
       CE_COMPILE_SELECTION: ${{ vars.CE_COMPILE_SELECTION }}
@@ -26,6 +27,9 @@ jobs:
       sm8090_match: ${{ steps.set_output.outputs.sm8090_match }}
 
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Set Version
         id: set_output
         env:
@@ -78,9 +82,13 @@ jobs:
           done
 
   print_ce_job_pre_check_outputs:
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     needs: ce_job_pre_check
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Print outputs as JSON
         run: |
           echo '${{ toJSON(needs.ce_job_pre_check.outputs) }}'
@@ -89,12 +97,16 @@ jobs:
   clone:
     environment: CodeSync
     name: FD-Clone-Linux
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     needs: ce_job_pre_check
     if: ${{ needs.ce_job_pre_check.outputs.branch_match == 'true' }}
     outputs:
       repo_archive_url: ${{ steps.set_output.outputs.repo_archive_url }}
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Clone FastDeploy
         uses: actions/checkout@v6
         with:
@@ -154,8 +166,12 @@ jobs:
   resultshow:
     name: Show Code Archive Output
     needs: clone
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Print repo_archive_url path
         run: |
           echo "The code archive is located at: ${{ needs.clone.outputs.repo_archive_url }}"
@@ -207,13 +223,17 @@ jobs:
     environment: CodeSync
     name: CE_UPLOAD
     needs: build_sm8090
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       AK: ${{ secrets.BOS_AK }}
       SK: ${{ secrets.BOS_SK }}
       FASTDEPLOY_WHEEL_URL: ${{ needs.build_sm8090.outputs.wheel_path }}
       COMPILE_ARCH: "80,90"
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
@@ -257,13 +277,17 @@ jobs:
     environment: CodeSync
     name: CE_UPLOAD_RL
     needs: build_sm8090_rl
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       AK: ${{ secrets.BOS_AK }}
       SK: ${{ secrets.BOS_SK }}
       FASTDEPLOY_WHEEL_URL: ${{ needs.build_sm8090_rl.outputs.wheel_path_rl }}
       COMPILE_ARCH: "80,90"
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
@@ -303,13 +327,17 @@ jobs:
     environment: CodeSync
     name: CE_UPLOAD
     needs: build_sm8689
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     env:
       AK: ${{ secrets.BOS_AK }}
       SK: ${{ secrets.BOS_SK }}
       FASTDEPLOY_WHEEL_URL: ${{ needs.build_sm8689.outputs.wheel_path }}
       COMPILE_ARCH: "86,89"
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - uses: actions/setup-python@v6
         with:
           python-version: '3.10'

.github/workflows/check-bypass.yml

@@ -18,7 +18,8 @@ on:
 jobs:
   check-bypass:
     name: Check bypass
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     permissions:
       contents: read
     env:
@@ -64,7 +65,9 @@ jobs:
             exit 0
           fi
 
-          files=$(gh pr view ${{ github.event.pull_request.number }} --repo ${{ github.repository }} --json files --jq '.files[].path')
+          files=$(curl -s -H "Authorization: token $GITHUB_TOKEN" \
+            "https://api.github.com/repos/${{ github.repository }}/pulls/${{ github.event.pull_request.number }}/files?per_page=100" \
+            | jq -r '.[].filename')
           echo "$files"
 
           can_skip_docs=true

.github/workflows/cherry-pick.yml

@@ -22,8 +22,12 @@ jobs:
         github.event.action == 'labeled' ||
         contains(join(github.event.pull_request.labels.*.name, ' '), 'cherry-pick')
       )
-    runs-on: ubuntu-latest
+    runs-on:
+      group: APPROVAL
     steps:
+      - name: Cleanup
+        run: |
+          rm -rf * .[^.]*
       - name: Checkout
         uses: actions/checkout@v6
         with: